Privacy
Privacy Policy
This policy explains which data Convigo collects, why, how long it is retained and what your rights are. It applies to the entire Convigo ecosystem: showcase site (convigo.fr), web platform (hub.convigo.fr) and the Convigo mobile application (iOS and Android).
Version 1.0 2026
1. Data controller
The controller of the personal data collected via the Convigo Platform is:
- Identity: Fabio DI MARTINO, Sole Trader
- Trade name: DEVAPP'CO / Convigo
- Address: LIFE PARK, 105 chemin de Château Gombert, 13013 Marseille, France
- SIREN: 918 645 300
- Contact: contact@convigo.fr
2. Data collected and purposes
2.1. Showcase site (convigo.fr)
The showcase site does not require account creation. The following data may be collected:
- Contact form: first name, last name, email address, message. Used solely to respond to your request.
- Analytics (Umami): pages visited, visit duration, country, device type, browser in anonymized and aggregated form, without personal identification. No third-party cookie is used by this tool.
- Server logs: IP address, browser, pages viewed collected automatically by the host (OVH) for security and maintenance purposes.
2.2. User account and platform (hub.convigo.fr)
Creating a Convigo account involves the collection of the following data:
- Email address and password (encrypted)
- First name or display name
- History of created itineraries
- Connection date and time
- Subscription status and purchase history (via RevenueCat)
This data is necessary to provide the service (performance of the contract) and to manage your account.
2.3. Mobile application (iOS and Android)
- GPS location: used solely to display your position on the map during navigation. Processed locally on your device, not transmitted to our servers, not retained beyond the session.
- Camera and photos: accessible only if you choose to contribute photos of listed structures. Optional permission.
- Push notifications: sent with your prior consent (GPS alerts, service information). Can be disabled at any time.
- Analytics (Firebase Analytics): anonymized usage events (screens viewed, in-app actions) in order to improve the service. No personally identifiable data is collected for this purpose.
- Crash reports (Firebase Crashlytics): in the event of an application crash, technical information is collected automatically (error trace, application version, device operating system model and version). This data does not contain personally identifiable data and is used solely to fix bugs.
2.4. Community contributions
When you contribute information (photos, clearance measurements, comments on listed structures), this content is associated with your account and shared with the Convigo community. It may be retained even after your account is deleted, in anonymized form.
2.5. Payment and subscription data
Payment data (bank details, billing history) is managed exclusively by RevenueCat and the distribution stores (Apple App Store, Google Play). Convigo does not have access to your bank details. Only the subscription status and transaction identifier are transmitted to Convigo.
3. Legal bases
| Processing | Legal basis (GDPR) |
|---|---|
| Account and itinerary management | Performance of the contract (art. 6.1.b) |
| Subscriptions and billing | Performance of the contract + legal obligation (art. 6.1.b and 6.1.c) |
| Server logs and security | Legitimate interest (art. 6.1.f) |
| Umami analytics (anonymized) | Legitimate interest (art. 6.1.f) |
| GPS geolocation | Performance of the contract (art. 6.1.b) |
| Push notifications | Consent (art. 6.1.a) |
| Contact form | Legitimate interest / consent (art. 6.1.f / 6.1.a) |
4. Subprocessors and recipients
Convigo uses the following subprocessors, all subject to contractual data protection guarantees (DPA/GDPR art. 28):
| Subprocessor | Role | Location |
|---|---|---|
| OVH SAS | Server hosting | France (EU) |
| RevenueCat, Inc. | Subscription and payment management (web + mobile) | United States (SCC) |
| Umami | Anonymized analytics | EU / self-hosted |
| Google LLC Firebase Analytics | Mobile application analytics (anonymized) | United States (SCC) |
| Google LLC Firebase Crashlytics | Mobile application crash reports | United States (SCC) |
| Apple Inc. | iOS distribution (App Store) | United States (SCC) |
| Google LLC Play Store | Android distribution (Google Play) | United States (SCC) |
SCC = Standard Contractual Clauses approved by the European Commission (Decision 2021/914).
5. Retention period
| Data category | Duration |
|---|---|
| Account data | Lifetime of the account + 3 years after closure (civil limitation period) |
| Server logs | 12 months |
| Billing data | 10 years (accounting obligations) |
| Contact form | 3 years from the last contact |
| Community contributions | Lifetime of the account; retained in anonymized form after account deletion |
| GPS data | Not retained (local processing only) |
6. Transfers outside the European Union
Some subprocessors (RevenueCat, Apple, Google) are established in the United States. These transfers are governed by the Standard Contractual Clauses (SCC) adopted by the European Commission, which guarantee a level of protection equivalent to that applicable in the EU.
No other data is transferred outside the European Union.
7. Cookies and trackers
The convigo.fr site uses a limited number of trackers:
- Umami Analytics: a privacy-friendly audience analysis tool. It does not set any third-party cookie and does not collect any personally identifiable data. Statistics are aggregated and anonymous.
- RevenueCat (web): uses the browser's local storage to anonymously identify your subscription session. No personally identifiable data is stored on the client side.
No advertising, behavioral tracking or social network cookie is used on the Platform.
8. Your rights
In accordance with the GDPR (articles 15 to 22), you have the following rights over your personal data:
- Access: obtain a copy of the data we hold about you
- Rectification: correct inaccurate or incomplete data
- Erasure: request the deletion of your data ("right to be forgotten")
- Objection: object to processing based on legitimate interest
- Restriction: request the temporary suspension of processing
- Portability: receive your data in a structured, machine-readable format (JSON or CSV)
- Withdrawal of consent: revoke at any time a consent given (push notifications, GPS)
To delete your account, see the Account deletion page.
To exercise any other right, contact us at contact@convigo.fr. We respond within 30 days.
9. Contact and complaints
For any question relating to this policy or to your personal data:
- Email: contact@convigo.fr
- Postal mail: DEVAPP'CO / Convigo LIFE PARK, 105 chemin de Château Gombert, 13013 Marseille, France
If you believe that your rights are not being respected, you may lodge a complaint with the CNIL (French Data Protection Authority), the competent French supervisory authority.
For any question: contact@convigo.fr